Vulnerabilities

TI-2007-04697 CVE-2007-4863 · GHSA-4xvw-fjx2-wmpv

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to…

LOW 32

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0118 Published 2007-10-30 No fix listed CWE-89

TI-2007-04696 CVE-2007-4862 · GHSA-w9gf-3cjv-vfxp

Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the config[news_url] parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01849 Published 2007-10-30 No fix listed CWE-79

TI-2007-04695 CVE-2007-4861 · GHSA-ggh7-8g84-pcwc

SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive…

LOW 26

SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct request for news.php, (2) an invalid use of a newsid array parameter to admin/edit-item.php, and possibly u…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01814 Published 2007-10-30 No fix listed CWE-200

Vulnerabilities

Filters

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to…

Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote…

SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive…